Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: CvTloqaR5+KwkbvRI9oL+4U2gYxXpx8IFCePISp2c9k=
Subject key identifier: 00:08:F3:8A:76:EB:E1:40:BE:58:C6:D9:E7:0E:1C:6C:01:1E:5A:81
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019CADC7F724856621B76491E21BF72E0130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 17E8
Signing time: Mon 02 Mar 2026 09:01:29 +0000
Manifest this update: Mon 02 Mar 2026 09:01:29 +0000
Manifest next update: Tue 03 Mar 2026 09:01:29 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: gL1zSJ5lGQM13Hh6+3uAsZ5xKrQEnbpCaIZUhkGAFVQ=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f7:24:85:66:21:b7:64:91:e2:1b:f7:2e:01:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Mar 2 09:01:29 2026 GMT
Not After : Mar 3 09:01:29 2026 GMT
Subject: CN=0008f38a76ebe140be58c6d9e70e1c6c011e5a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:19:e4:e9:6d:3a:d8:f3:0e:76:11:0f:e6:
12:4a:29:96:77:df:82:4a:46:a9:3a:7b:4f:d0:ba:
16:95:0e:f1:da:a0:bc:0b:51:1a:c7:84:31:68:24:
30:08:ff:08:b2:88:f9:47:bd:6e:3a:ca:e1:0b:4a:
d1:9e:13:b2:18:34:c7:67:24:9f:c7:22:f1:b0:b6:
7b:73:04:6c:b7:80:4b:84:c1:8d:84:76:12:34:7c:
3f:22:c1:02:1a:a9:00:0a:f8:08:95:7a:f8:0d:61:
db:5d:b1:b2:ce:98:73:44:23:d0:66:8e:37:02:c7:
90:13:e2:b9:9f:10:02:47:e2:68:d8:a3:5d:74:ae:
e8:c7:d1:4a:47:33:aa:af:63:19:4c:d4:8b:60:88:
8b:1f:a6:81:dd:52:e1:55:e2:ea:49:92:af:aa:80:
04:d8:99:e7:d1:2a:8d:90:23:8d:a1:e5:cd:21:ff:
4c:c0:94:bb:1f:d2:aa:1e:71:d0:85:c6:fc:d8:26:
6b:bd:ac:5c:66:1e:b2:2e:49:8b:8e:f4:83:80:fa:
fa:f5:77:e1:12:43:da:c4:61:ab:c0:58:d0:a0:c9:
7b:a0:b8:1f:b9:9c:ff:dd:b8:f1:d3:51:a5:9e:91:
2b:3e:49:ca:30:f5:82:59:56:8f:a5:ae:90:76:da:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:08:F3:8A:76:EB:E1:40:BE:58:C6:D9:E7:0E:1C:6C:01:1E:5A:81
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3c:04:b3:1d:58:a0:3b:13:fb:07:97:a4:de:20:45:d3:29:
fb:6c:fd:97:ff:bd:ae:7b:61:5e:7f:cd:04:9e:ac:43:b1:f2:
bd:8c:ac:aa:f4:c2:71:a7:d5:94:83:c0:5f:ca:6b:4c:4b:2b:
7f:75:2c:70:e4:75:d6:2c:68:0d:00:f0:40:ab:67:6a:27:ac:
c0:dc:9e:22:55:28:1c:f1:28:83:14:93:62:71:28:8b:f3:87:
56:93:98:dd:30:8c:4e:07:04:70:0e:81:9d:90:64:45:c6:a6:
32:fc:24:ec:68:ff:19:7d:4c:16:b0:7f:76:ad:03:59:2a:56:
48:bb:08:48:35:23:07:e2:75:9c:fe:51:42:89:84:3b:7d:58:
d2:1a:80:ce:6c:77:0e:69:fa:5b:57:7d:bc:f8:aa:0b:d7:df:
9b:ec:28:88:12:cb:5f:46:23:01:cf:1b:8f:bb:90:9d:eb:21:
ad:a0:b6:2c:1c:df:ef:54:64:31:1a:1e:fb:82:39:66:ae:c9:
40:cc:19:36:48:49:6e:da:22:f0:72:64:36:e5:a8:f3:84:4f:
f3:19:a4:dc:48:bf:9b:d9:27:7c:3f:b4:37:78:35:c0:78:79:
05:15:fe:2e:8b:2a:b5:1f:68:b4:81:a1:3c:4f:08:15:fc:4b:
d4:ab:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:42 2026 by rpki-client